關於特徵碼: http://zh.wikipedia.org/zh-hk/%E7%89%B9%E5%BE%81%E7%A0%81
是次測試目的係了解各防毒特徵碼質素及特徵碼取樣方針等等
測試防毒產品有Kaspersky 同埋 Microsoft Security Essentials (MSE)
- Kaspersky Internet Security 2011
- Product Version: 11.0.2.544
- Database: 22/11/2010 20:15:00
- Microsoft Security Essentials
- Product Version: 1.0.2498.0
- Database: 1.95.333.0
 
有59隻病毒, 包括左3大種類變種, 病毒樣本日期為 14/11/2010(一個星期前)
Kaspersky 結果:
59隻病毒樣本全殺....正常
詳細結果:
bac.exe - Trojan-GameThief.Win32.Magania.ox
coa-1114-001.exe - Backdoor.Win32.Hupigon.msli
coa-1114-002.exe - Backdoor.Win32.Hupigon.mslj
ma-1114-001.exe - Trojan-GameThief.Win32.Magania.eadb
ma-1114-002.exe - Trojan-GameThief.Win32.Magania.eazj
ma-1114-003.exe - Trojan-GameThief.Win32.Magania.eazk
ma-1114-004.exe - Trojan-GameThief.Win32.Magania.eaev
ma-1114-005.exe - Trojan-GameThief.Win32.Magania.eazl
ma-1114-006.exe - Trojan-GameThief.Win32.Magania.eagi
ma-1114-007.exe - Trojan-GameThief.Win32.Magania.eazm
ma-1114-008.exe - Trojan-GameThief.Win32.Magania.eajy
ma-1114-009.exe - Trojan-GameThief.Win32.Magania.eajm
ma-1114-010.exe - Trojan-GameThief.Win32.Magania.eakr
ma-1114-011.exe - Trojan-GameThief.Win32.Magania.eamm
ma-1114-013.exe - Trojan-GameThief.Win32.Magania.eamm
ma-1114-012.exe - Trojan-GameThief.Win32.Magania.ealq
ma-1114-014.exe - Trojan-GameThief.Win32.Magania.eaob
ma-1114-015.exe - Trojan-GameThief.Win32.Magania.eaph
ma-1114-016.exe - Trojan-GameThief.Win32.Magania.eapg
ma-1114-017.exe - Trojan-GameThief.Win32.Magania.eapi
ma-1114-018.exe - Trojan-GameThief.Win32.Magania.eazn
ma-1114-019.exe - Trojan-GameThief.Win32.Magania.eazo
ma-1114-020.exe - Trojan-GameThief.Win32.Magania.eaup
ma-1114-021.exe - Trojan-GameThief.Win32.Magania.eazp
ma-1114-022.exe - Trojan-GameThief.Win32.Magania.eazq
ma-1114-023.exe - Trojan-GameThief.Win32.Magania.eawx
ma-1114-024.exe - Trojan-GameThief.Win32.Magania.eazr
ma-1114-025.exe - Trojan-GameThief.Win32.Magania.eays
mail-1114-001.exe - Trojan-GameThief.Win32.Magania.eaca
mail-1114-002.exe - Trojan-GameThief.Win32.Taworm.gcc
mail-1114-003.exe - Trojan-GameThief.Win32.Magania.eacc
mail-1114-004.exe - Trojan-GameThief.Win32.Magania.eazs
mail-1114-005.exe - Trojan-GameThief.Win32.Magania.eazt
mail-1114-006.exe - Trojan-GameThief.Win32.Magania.eazu
mail-1114-007.exe - Trojan-GameThief.Win32.Magania.eamf
mail-1114-008.exe - Trojan-GameThief.Win32.Magania.ebaf
mail-1114-009.exe - Trojan-GameThief.Win32.Magania.eazw
mail-1114-010.exe - Trojan-GameThief.Win32.Magania.eazy
mail-1114-011.exe - Trojan-GameThief.Win32.Taworm.gfg
mail-1114-012.exe - Trojan-GameThief.Win32.Taworm.gfh
mail-1114-013.exe - Trojan-GameThief.Win32.Taworm.gfi
mail-1114-014.exe - Trojan-GameThief.Win32.Magania.eazz
mail-1114-015.exe - Trojan-GameThief.Win32.Taworm.gfj
mail-1114-016.exe - Trojan-GameThief.Win32.Taworm.gfk
mail-1114-017.exe - Trojan-GameThief.Win32.Taworm.gfl
mail-1114-018.exe - Trojan-GameThief.Win32.Magania.ebag
mail-1114-019.exe - Trojan.Win32.Jorik.Taworm.n
mail-1114-020.exe - Trojan-GameThief.Win32.Taworm.gfm
photo.vbs - Trojan.VBS.Agent.le
s-1114-001.exe - Trojan-GameThief.Win32.Magania.eadv
s-1114-002.exe - Trojan-GameThief.Win32.Magania.eaeb
s-1114-003.exe - Trojan-GameThief.Win32.Magania.eajk
s-1114-004.exe - Trojan-GameThief.Win32.Magania.ealp
s-1114-005.exe - Trojan-GameThief.Win32.Magania.eaow
s-1114-006.exe - Trojan-GameThief.Win32.Magania.eawy
s-1114-007.exe - Trojan-GameThief.Win32.Magania.earm
s-1114-008.exe - Trojan-GameThief.Win32.Magania.eayn
wiar-1114-001.exe - Trojan-GameThief.Win32.Magania.ebai
wiar-1114-002.exe - Trojan-GameThief.Win32.Magania.ebaj
Kaspersky足足用了58條特徵碼去偵側59隻變種, 由我回報Kaspersky Lab, 由Kaspersky Lab分析師Fedor Sinitsyn處理 ...
可是Microsoft Security Essentials....
只係用左10條特徵碼去偵側59隻變種, 比起Kaspersky用58條特徵碼去偵側59隻變種差得遠.
好似Microsoft咁既廣義特徵碼抽取, 令到Microsoft Security Essentials對新變種及新病毒偵測比率有效提升及免殺困難,
但咁既廣義特徵碼抽取, 令Microsoft Security Essentials誤報稍徵提升,
跟據卡飯11月誤報測試結果(%越少越好), Kaspersky為6.78%, MSE為18.64%
由此可見
Kaspersky徵碼取樣方針較保守
Microsoft徵碼取樣方針較向偵測率
以上分析及結果由AVP惡意軟件回報成員及惡意軟件分析成員henrysky擁有
| 
